mozilla-django-oidc
A lightweight authentication and access management library for integration with OpenID Connect enabled authentication services.
Decision gist · record as of 2026-08-14
Yes, with conditions. The package is production-stable, widely used (1.1M monthly downloads), audited by Mozilla InfoSec, and has no known vulnerabilities. However, maintenance is aging (238 days since last release); verify that Django 5.2 compatibility is current for your version before adopting. If you need OIDC authentication in Django and can accept the MPL-2.0 copyleft license, this is a solid choice.AI-flagged interpretation of the facts on this page — verify before relying
Before you install
- Requires Django 4.2 or later and Python 3.10 or later; OIDC provider endpoint must be configured in Django settings.
- Low install friction with a pure-Python wheel distribution.
- Maintenance status is aging—last release was 238 days ago—but the repository remains active with a recent commit on 2026-01-07 and no archived status.
License · maintenance · safety
MPL-2.0 (copyleft) — Licensed under MPL-2.0 (copyleft). You must disclose source code modifications and distribute under the same license if you modify and redistribute the package, but can use it in proprietary applications without distributing the library itself.
last release 2025-12-19 (238 days) · last repo commit 2026-01-07 · 553 stars
0 known vulnerabilities (OSV.dev, 2026-08-14) · 1,143,073 downloads/mo, #4,303 on PyPI
Alternatives
Verify before relying
pip install mozilla-django-oidc
from mozilla_django_oidc.auth import OIDCAuthenticationBackend
# Add to Django AUTHENTICATION_BACKENDS
AUTHENTICATION_BACKENDS = [
'mozilla_django_oidc.auth.OIDCAuthenticationBackend',
]- Whether the package supports OIDC implicit flow or only authorization code flow as stated in design principles.
- Current compatibility with Django 5.2 given the aging maintenance status and 238-day release gap.
- Whether custom backend overrides are documented with examples for common use cases.
What it is and what it does
mozilla-django-oidc is a lightweight Django authentication backend that connects your application to OpenID Connect identity providers. It handles the OIDC authorization code flow to authenticate users against external identity services, storing minimal authentication artifacts in your Django session. The library is designed around simplicity and security: it supports custom authentication backend overrides for site-specific logic, has been audited by Mozilla InfoSec, and targets modern Django versions (4.2 through 5.2) with Python 3.10+.
The package depends on Django, pyjwt, requests, and cryptography to manage JWT token validation, HTTP communication with the OIDC provider, and cryptographic operations. It is primarily used to offload user authentication to a centralized identity provider—useful for single sign-on scenarios, federated authentication, or integration with Mozilla's own authentication infrastructure.
Use it for
- Integrate a Django application with a corporate or institutional OpenID Connect provider for centralized user authentication.
- Implement single sign-on (SSO) across multiple Django applications using a shared OIDC identity provider.
- Delegate user authentication to an external identity service while maintaining custom authorization logic in Django.
- Add Mozilla-specific authentication and authorization features to a Django application.
- Build a multi-tenant Django application where each tenant connects to its own OIDC provider.
Worth the install?
AI-flagged interpretation of the facts on this page. Verify before relying on it.
Yes, with conditions.
The package is production-stable, widely used (1.1M monthly downloads), audited by Mozilla InfoSec, and has no known vulnerabilities. However, maintenance is aging (238 days since last release); verify that Django 5.2 compatibility is current for your version before adopting. If you need OIDC authentication in Django and can accept the MPL-2.0 copyleft license, this is a solid choice.
Install
mozilla-django-oidc on PyPI
Before you install
Low install friction with a pure-Python wheel distribution. Maintenance status is aging—last release was 238 days ago—but the repository remains active with a recent commit on 2026-01-07 and no archived status.
Requires Django 4.2 or later and Python 3.10 or later; OIDC provider endpoint must be configured in Django settings.
License in practice
Licensed under MPL-2.0 (copyleft). You must disclose source code modifications and distribute under the same license if you modify and redistribute the package, but can use it in proprietary applications without distributing the library itself.
Quickstart
pip install mozilla-django-oidc
from mozilla_django_oidc.auth import OIDCAuthenticationBackend
# Add to Django AUTHENTICATION_BACKENDS
AUTHENTICATION_BACKENDS = [
'mozilla_django_oidc.auth.OIDCAuthenticationBackend',
]Verify before relying
- Whether the package supports OIDC implicit flow or only authorization code flow as stated in design principles.
- Current compatibility with Django 5.2 given the aging maintenance status and 238-day release gap.
- Whether custom backend overrides are documented with examples for common use cases.
Package facts
| License | MPL-2.0 copyleft |
| Python support | Supports the current Python release >=3.10 |
| Install friction | Low. Pure-Python wheel |
| Runtime dependencies | 4 packagesDjangopyjwtrequestscryptography |
| Maintenance | Aging 238 days since the last release |
| Last repo commit | |
| First released | |
| Downloads | 1,143,073 / month, #4,303 on PyPI 30-day window, as of 2026-08-14 |
| Known vulnerabilities | None known OSV.dev, checked 2026-08-14 |
| Classifiers | Development Status :: 5 - Production/StableFramework :: DjangoFramework :: Django :: 4.2Framework :: Django :: 5.0Framework :: Django :: 5.1Framework :: Django :: 5.2Intended Audience :: DevelopersNatural Language :: EnglishOperating System :: MacOSOperating System :: POSIX :: LinuxProgramming Language :: Python :: 3Programming Language :: Python :: 3 :: OnlyProgramming Language :: Python :: 3.10Programming Language :: Python :: 3.11Programming Language :: Python :: 3.12Programming Language :: Python :: 3.13Programming Language :: Python :: 3.14 |
Evidence: mozilla_django_oidc-5.0.2-py3-none-any.whl
Tags
Let your AI agent find packages like this
Example. Real query, live index.
You found this page by searching. An agent finds it by wishing: SkillFed indexes 14,416 PyPI packages by what they can do, searchable in plain language.
wish › “django openid connect authentication”
- mozilla-django-oidcIntegrates Django applications with OpenID Connect identity providers…
- django-oidc-providerProvides OpenID Connect and OAuth 2.0 server endpoints,…
- django-allauthProvides integrated local and social authentication for Django…
Give your agent the search over MCP, or paste the wish link into any chat.
More WWW/HTTP packages
urllib3 is an HTTP client library that provides thread-safe connection pooling, SSL/TLS verification, multipart file uploads, request retries, compression support, and proxy handling for Python applications.
Requests is a Python HTTP library that simplifies sending HTTP/1.1 requests with automatic handling of headers, authentication, cookies, and response parsing.
h11 is a pure-Python HTTP/1.1 protocol implementation that handles parsing and serializing HTTP messages without any built-in I/O, letting you integrate it with any network layer you choose.
HTTPX is a fully featured HTTP client library for Python that provides both sync and async APIs, with support for HTTP/1.1 and HTTP/2, plus an integrated command-line client.
Install it if you are building new projects or modernizing existing ones that rely on HTTP.
A minimal low-level HTTP client library that sends HTTP requests with thread-safe and task-safe connection pooling, supporting HTTP/1.1, HTTP/2, proxies, and both sync and async interfaces.
aiohttp is an async HTTP client and server framework built on asyncio, supporting both WebSockets and middleware-based routing for building concurrent web applications.
Install it if you need async HTTP client or server capabilities in asyncio-based applications.
See also django-oidc-provider · flask-oidc · pyop · oidc-provider-mock · oic · dash-auth · Authlib · PyLTI1p3 · python-keycloak · stups-zign